.dockerignore

# Both compose files build with `context: ..` (the repo root), so this is the
# .dockerignore that actually applies — the per-service web/.dockerignore is
# inert. Without these excludes, `COPY web/ ./` and `COPY controller/ ./` drag
# the host's stale node_modules into the image, merging on top of the fresh
# `npm ci` install and corrupting it (e.g. a Tailwind v3/v4 hybrid).
**/node_modules
**/.next
.git
.backups
state

# Dev-only env files MUST NOT leak into the prod web image — Next.js bakes
# NEXT_PUBLIC_* values into the static client bundle at build time, so a
# stray web/.env.local with NEXT_PUBLIC_API_URL=http://localhost:7701 would
# override the same-origin default the prod image is meant to ship. Keep
# .env.example whitelisted so docs/templates still ship.
**/.env
**/.env.*
!**/.env.example